abrade-cli 0.3.0__tar.gz → 0.3.1__tar.gz

{abrade_cli-0.3.0 → abrade_cli-0.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: abrade-cli
-Version: 0.3.0
+Version: 0.3.1
 Summary: Abrade's self-hosted CLI — run the injection suite on your own machine, results stay local, no SaaS account required.
 Keywords: ai-agents,security-testing,prompt-injection,red-teaming,llm-security
 Author: Abrade
@@ -14,7 +14,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Security
 Classifier: Topic :: Software Development :: Testing
-Requires-Dist: anthropic>=0.119.0
+Requires-Dist: anthropic>=0.119.0,<1
 Requires-Dist: fpdf2>=2.8.7
 Requires-Dist: httpx>=0.28.1,<1
 Requires-Dist: pydantic>=2.13.4

{abrade_cli-0.3.0 → abrade_cli-0.3.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "abrade-cli"
-version = "0.3.0"
+version = "0.3.1"
 description = "Abrade's self-hosted CLI — run the injection suite on your own machine, results stay local, no SaaS account required."
 readme = "README.md"
 requires-python = ">=3.12"
@@ -23,7 +23,7 @@ classifiers = [
     "Topic :: Software Development :: Testing",
 ]
 dependencies = [
-    "anthropic>=0.119.0",
+    "anthropic>=0.119.0,<1",
     "fpdf2>=2.8.7",
     "httpx>=0.28.1,<1",
     "pydantic>=2.13.4",

{abrade_cli-0.3.0 → abrade_cli-0.3.1}/pyproject.toml.orig

@@ -1,6 +1,6 @@
 [project]
 name = "abrade-cli"
-version = "0.3.0"
+version = "0.3.1"
 description = "Abrade's self-hosted CLI — run the injection suite on your own machine, results stay local, no SaaS account required."
 readme = "README.md"
 # The project, not a personal handle. PyPI renders this as "Author" on
@@ -40,7 +40,11 @@ classifiers = [
     "Topic :: Software Development :: Testing",
 ]
 dependencies = [
-    "anthropic>=0.119.0",
+    # Below 1 because we hand the SDK an httpx client, which is where the response
+    # budgets live, and anthropic 2 accepts only httpx2. pip resolves the newest this
+    # allows and never reads uv.lock, so without a cap 0.3.0 crashed on the default config
+    # for anyone installing it while passing everything run on the lock.
+    "anthropic>=0.119.0,<1",
     "fpdf2>=2.8.7",
     "httpx>=0.28.1,<1",
     "pydantic>=2.13.4",

{abrade_cli-0.3.0 → abrade_cli-0.3.1}/src/abrade_cli/cli.py

@@ -162,7 +162,9 @@ def upgrade(
         f"[yellow]Update available:[/yellow] "
         f"{release.installed} → [bold]{release.latest}[/bold]"
     )
-    console.print(f"\n  {upgrade_module.install_command()}\n")
+    # Written out to be copied: a long path must not wrap, and a bracket is not markup.
+    command = escape(upgrade_module.install_command())
+    console.print(f"\n  {command}\n", soft_wrap=True)
     if check_only:
         raise typer.Exit(code=1)
 

{abrade_cli-0.3.0 → abrade_cli-0.3.1}/src/abrade_cli/upgrade.py

@@ -17,8 +17,11 @@ updated it and the new command still isn't there".
 
 from __future__ import annotations
 
+import importlib.util
 import json
 import os
+import shlex
+import subprocess
 import sys
 import urllib.error
 import urllib.request
@@ -72,25 +75,46 @@ def latest_version(*, timeout: float = 10.0) -> str:
         raise UpgradeCheckError("PyPI returned an unexpected response.") from exc
 
 
+def _has_pip() -> bool:
+    return importlib.util.find_spec("pip") is not None
+
+
+def _quoted(path: str) -> str:
+    return subprocess.list2cmdline([path]) if os.name == "nt" else shlex.quote(path)
+
+
 def install_command() -> str:
     """The upgrade command for whichever installer put this here.
 
     Detected from the path of the running interpreter rather than asked
     for, because the common failure is not knowing which manager was used
     — and the answer is sitting in sys.executable.
-    """
-    executable = Path(sys.executable).resolve()
-    parts = {p.lower() for p in executable.parts}
 
-    if "uv" in parts or "uv-tool" in parts or os.environ.get("UV_TOOL_DIR"):
+    The path as it stands, never resolved. A venv's python is a symlink to the
+    interpreter it was made from, so following it leaves the one directory that
+    says who installed this.
+    """
+    executable = Path(sys.executable)
+    ordered = [p.lower() for p in executable.parts]
+    parts = set(ordered)
+    uv_tool_dir = os.environ.get("UV_TOOL_DIR")
+
+    if (
+        ("uv", "tools") in zip(ordered, ordered[1:], strict=False)
+        or "uv-tool" in parts
+        or (uv_tool_dir and executable.is_relative_to(uv_tool_dir))
+    ):
         return "uv tool upgrade abrade-cli"
     if "pipx" in parts:
         return "pipx upgrade abrade-cli"
-    if any("virtualenvs" in p or ".venv" in p for p in parts):
-        # Inside a project environment, so upgrading globally would touch a
-        # different copy than the one being run.
-        return "uv pip install --upgrade abrade-cli"
-    return "pip install --upgrade abrade-cli"
+    # Aimed at this interpreter either way. A bare `pip` is whichever is first on PATH,
+    # and a bare `uv pip` whichever environment it finds from the working directory.
+    # Upgrading another copy succeeds and changes nothing about the one that asked.
+    python = _quoted(sys.executable)
+    if _has_pip():
+        return f"{python} -m pip install --upgrade abrade-cli"
+    # `uv venv` leaves pip out, so `-m pip` would only fail.
+    return f"uv pip install --python {python} --upgrade abrade-cli"
 
 
 def check(installed: str, *, timeout: float = 10.0) -> Release: